Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4831	6.5	警告 Network	n8n	n8n	n8nにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-42227	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

4832	6.5	警告 Network	n8n	n8n	n8nにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-42228	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4833	8.8	重要 Network	n8n	n8n	n8nにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42229	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4834	6.1	警告 Network	n8n	n8n	n8nにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-42230	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4835	8.8	重要 Network	n8n	n8n	n8nにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42231	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4836	8.8	重要 Network	n8n	n8n	n8nにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42232	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4837	9.8	緊急 Network	n8n	n8n	n8nにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42233	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4838	8.8	重要 Network	n8n	n8n	n8nにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-42234	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4839	9.6	緊急 Network	n8n	n8n	n8nにおける複数の脆弱性	CWE-79 CWE-87	CVE-2026-42235	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

4840	7.5	重要 Network	n8n	n8n	n8nにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-42236	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
661	-		-	-	Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious scripts in the browse…	CWE-79 Cross-site Scripting	CVE-2026-44205	2026-06-13 00:56	2026-06-13	Show	GitHub Exploit DB Packet Storm

662	-		-	-	Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, stored XSS in Note was possible due to lack of sanitization. This issue has been patched in versions 15.106.0…	CWE-79 Cross-site Scripting	CVE-2026-47739	2026-06-13 00:56	2026-06-13	Show	GitHub Exploit DB Packet Storm

663	8.7	HIGH Network	-	-	Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WEOLL: …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2026-6211	2026-06-13 00:51	2026-06-13	Show	GitHub Exploit DB Packet Storm

664	9.8	CRITICAL Network	-	-	Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass. This issue …	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2026-6853	2026-06-13 00:51	2026-06-13	Show	GitHub Exploit DB Packet Storm

665	6.5	MEDIUM Network	apache	apache-airflow-providers-samba	The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../` segments resolved a write path …	CWE-22 Path Traversal	CVE-2026-49818	2026-06-13 00:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

666	9.8	CRITICAL Network	qnap	qumagie	An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges. We have …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44083	2026-06-13 00:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

667	6.5	MEDIUM Network	qnap	qts quts_hero	A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to mod…	CWE-121 Stack-based Buffer Overflow	CVE-2025-62858	2026-06-13 00:44	2026-06-9	Show	GitHub Exploit DB Packet Storm

668	5.4	MEDIUM Network	microsoft	sharepoint_server	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	CWE-502 CWE-79 Deserialization of Untrusted Data Cross-site Scripting	CVE-2026-48560	2026-06-13 00:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

669	4.6	MEDIUM Network	microsoft	sharepoint_server	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	CWE-79 Cross-site Scripting	CVE-2026-48562	2026-06-13 00:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

670	6.1	MEDIUM Network	qnap	qts quts_hero	A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or…	CWE-79 Cross-site Scripting	CVE-2026-41539	2026-06-13 00:37	2026-06-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed